$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/91748e93-fba3-399e-8960-1257f3e9d1d0.roa File: 91748e93-fba3-399e-8960-1257f3e9d1d0.roa (raw, json) Hash identifier: MVU6YuB3nwkaEPNO3hdWHnpVBjWhvuwO729j2nSE8zA= Subject key identifier: D8:DC:EA:4C:74:34:84:81:B5:4B:60:B5:3E:B1:F1:8C:F0:EB:A2:F2 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F43285849B5F5B59B263920AEBCF36D00 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/91748e93-fba3-399e-8960-1257f3e9d1d0.roa Signing time: Thu 01 May 2025 17:10:13 +0000 ROA not before: Thu 01 May 2025 17:10:13 +0000 ROA not after: Wed 30 Jul 2025 17:10:13 +0000 asID: 22773 IP address blocks: 98.170.170.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:f5:b5:9b:26:39:20:ae:bc:f3:6d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: May 1 17:10:13 2025 GMT Not After : Jul 30 17:10:13 2025 GMT Subject: CN=e26fc981-c3e6-4ade-b84e-356cf572efc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c4:cd:6e:59:c0:50:74:d9:50:b4:2c:bb:b8: 88:84:bc:7a:3c:d6:36:ff:91:c2:39:62:07:f4:5c: f8:96:59:cc:e1:71:c2:ab:8d:10:32:ef:65:0b:e2: 67:eb:bc:fe:be:18:ef:a9:79:0a:99:63:52:8b:fa: 34:2f:a9:aa:fb:0b:df:9e:95:50:10:81:25:27:e8: a9:eb:92:e1:31:ef:d4:13:19:cb:d6:56:0b:83:9a: f8:cf:e7:b1:b2:fc:46:ba:d2:ad:9a:8f:72:08:05: dd:10:e7:44:ba:41:60:64:18:df:6d:b4:7d:97:e7: 54:08:85:81:e0:dc:67:9c:74:09:48:50:4a:5d:a7: 43:4c:12:0f:a7:7c:d2:99:5d:73:f8:12:b3:4d:c8: 9c:0a:5b:9f:eb:1c:96:51:c7:8c:33:7c:72:88:c8: 6c:a0:93:fe:17:10:77:54:75:78:b4:60:03:14:7e: ec:b9:12:eb:e8:a5:50:22:90:2f:18:ff:d8:64:9e: f5:10:6d:0a:04:90:02:bc:d1:2f:1a:78:2a:eb:7e: 98:92:35:e2:1f:c4:a6:44:a1:6e:80:bc:a5:c6:d7: 7f:c6:bf:c5:a5:c6:76:ab:72:7d:da:14:99:f0:55: 66:68:e2:3e:99:77:45:34:30:67:38:b8:39:33:59: 64:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:DC:EA:4C:74:34:84:81:B5:4B:60:B5:3E:B1:F1:8C:F0:EB:A2:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/91748e93-fba3-399e-8960-1257f3e9d1d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.170.170.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:18:1b:17:c1:cc:1e:91:ef:ad:07:dd:73:97:ca:08:79:5a: 33:63:c0:fd:18:1b:c6:93:7c:03:53:40:b9:c1:f1:d7:6e:97: 18:9c:0d:17:93:e0:05:2d:46:51:ec:c6:ce:4b:25:3d:fa:61: a5:f4:d4:91:da:c1:4b:fa:7c:d8:05:0c:37:be:85:16:89:5f: 1a:d9:8d:48:d5:71:51:4b:e7:63:5a:9b:16:71:ab:93:f0:e4: 23:18:4f:f0:9e:46:a9:97:64:39:7c:a2:79:48:72:39:35:54: dc:aa:e3:ea:e8:d3:46:7f:a4:a4:04:14:64:80:ae:c5:f3:ec: d7:10:ef:c3:e1:2f:5e:43:de:c6:be:de:03:6b:42:9f:68:19: 37:6b:08:b9:5d:24:81:4b:f3:1b:23:d3:14:b9:2b:4d:d7:f9: f9:f7:cf:c6:63:20:5b:38:c9:21:b6:23:af:bf:5b:c2:2c:95: d5:f9:18:4c:94:9e:0c:ca:a4:2e:72:77:ff:3d:72:93:f4:32: 32:e0:8a:4a:8d:5b:21:aa:6e:e4:20:75:08:7b:12:78:b5:35: 1c:f6:15:f9:01:30:87:35:77:c9:bc:f0:db:5e:4a:d8:e1:9c: a6:09:a7:ea:74:1a:5e:59:b0:f4:5b:46:f4:29:9a:70:37:57: fb:22:23:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm19bWbJjkgrrzzbQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDUwMTE3MTAxM1oXDTI1MDczMDE3MTAxM1owLzEtMCsGA1UEAxMk ZTI2ZmM5ODEtYzNlNi00YWRlLWI4NGUtMzU2Y2Y1NzJlZmM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8TNblnAUHTZULQsu7iIhLx6PNY2/5HCOWIH 9Fz4llnM4XHCq40QMu9lC+Jn67z+vhjvqXkKmWNSi/o0L6mq+wvfnpVQEIElJ+ip 65LhMe/UExnL1lYLg5r4z+exsvxGutKtmo9yCAXdEOdEukFgZBjfbbR9l+dUCIWB 4NxnnHQJSFBKXadDTBIPp3zSmV1z+BKzTcicCluf6xyWUceMM3xyiMhsoJP+FxB3 VHV4tGADFH7suRLr6KVQIpAvGP/YZJ71EG0KBJACvNEvGngq636YkjXiH8SmRKFu gLylxtd/xr/FpcZ2q3J92hSZ8FVmaOI+mXdFNDBnOLg5M1lkFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNjc6kx0NISBtUtgtT6x8Yzw66LyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOTE3NDhlOTMtZmJhMy0z OTllLTg5NjAtMTI1N2YzZTlkMWQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYqqqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGUYGxfBzB6R760H3XOXygh5WjNjwP0YG8aTfANTQLnB8ddulxicDReT 4AUtRlHsxs5LJT36YaX01JHawUv6fNgFDDe+hRaJXxrZjUjVcVFL52NamxZxq5Pw 5CMYT/CeRqmXZDl8onlIcjk1VNyq4+ro00Z/pKQEFGSArsXz7NcQ78PhL15D3sa+ 3gNrQp9oGTdrCLldJIFL8xsj0xS5K03X+fn3z8ZjIFs4ySG2I6+/W8IsldX5GEyU ngzKpC5yd/89cpP0MjLgikqNWyGqbuQgdQh7Eni1NRz2FfkBMIc1d8m88NteStjh nKYJp+p0Gl5ZsPRbRvQpmnA3V/siI8s= -----END CERTIFICATE-----Generated at Sun May 11 16:49:40 2025 by rpki-client